PT-2007-4580 · Ca · Etrust Intrusion Detection

Published 2007-07-26 · Updated 2021-04-09 · CVE-2007-3302

Positive Technologies (AI Summary)

CVSS v2.0

9.3

High

Base vector

AV:N/AC:M/Au:N/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions eTrust Intrusion Detection versions 3.0 before 20070713 eTrust Intrusion Detection versions 3.0 SP1 before 3.0.5.81

Description The issue allows remote attackers to load arbitrary DLLs on a client system and execute code from these DLLs via unspecified scriptable functions.

Recommendations For versions 3.0 before 20070713, update to a version after 20070713 to resolve the issue. For versions 3.0 SP1 before 3.0.5.81, update to version 3.0.5.81 or later to resolve the issue.

Fix

Related Identifiers

CVE-2007-3302

Affected Products

Etrust Intrusion Detection

References · 11

• http://securityfocus.com/bid/25050 · Patch
• https://nvd.nist.gov/vuln/detail/CVE-2007-3302 · Security Note
• http://supportconnectw.ca.com/public/etrust/etrust_intrusion/infodocs/eid-callervilnsecnot.asp · Patch
• http://secunia.com/advisories/26134 · Vendor Advisory
• http://labs.idefense.com/intelligence/vulnerabilities/display.php?id=568 · Patch
• https://exchange.xforce.ibmcloud.com/vulnerabilities/35565 · Note
• http://vupen.com/english/advisories/2007/2640 · Note
• http://securitytracker.com/id?1018447 · Note
• https://t.me/cvenotify/13010 · Telegram Post
• http://ca.com/us/securityadvisor/newsinfo/collateral.aspx?cid=149811 · Note
• http://securityfocus.com/archive/1/474599/100/0/threaded · Note